Skip to content

Cocos AI v0.7.0 Release Notes

Choose a tag to compare

View all tags
@SammyOina SammyOina released this 05 Aug 11:01
· 88 commits to main since this release
v0.7.0
be423e0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

We're excited to announce the release of Cocos AI v0.7.0, a major update that introduces Intel TDX support, enhanced attestation capabilities, and significant architectural improvements.

🚀 Major Features

Intel TDX Support

  • Full Intel TDX Integration: Added comprehensive support for Intel Trust Domain Extensions (TDX), enabling secure computation in Intel's confidential computing environment
  • TDX Attestation: Implemented complete TDX attestation support for enhanced security verification
  • Buildroot TDX Support: Modified Buildroot configuration to fully support Intel TDX environments

Enhanced Attestation & Security

  • New aTLS Implementation: Completely redesigned attestation-based TLS (aTLS) for improved security and performance
  • mTLS Integration: Enabled mutual TLS when using aTLS for enhanced authentication
  • PCR16 Extensions: Extended PCR16 register with computation manifest JSON hash for better integrity verification
  • Azure Attestation Improvements: Fixed Azure attestation token fetching to be platform-conditional

🔧 Infrastructure & Performance

Service Management

  • Graceful Shutdown: Implemented graceful shutdown mechanisms for all services
  • TTL Management: Added Time-To-Live management for virtual machines with improved context handling
  • Agent Restart Policy: Introduced restart policies for better agent reliability

Architecture Improvements

  • gRPC Handler Refactoring: Reorganized gRPC server handlers using map-based architecture for better maintainability
  • Data Path Flexibility: Made data paths optional for more flexible deployment scenarios
  • Nonce Validation: Added proper validation for nonce lengths in attestation requests

🐛 Bug Fixes & Stability

Critical Fixes

  • Computation Panic Resolution: Fixed panic where computations would stop after a failed run
  • Context Handling: Improved context handling to resolve failing TTL applications
  • Platform Detection: Enhanced SEV-SNP and TDX detection to properly check kernel parameters
  • Error Handling: Improved error handling in VM removal commands with proper connection checks

Quality Improvements

  • Test Coverage: Restored and improved test coverage to 65%
  • Log Message Clarity: Enhanced log messages throughout the system for better debugging
  • JSON Marshaling: Fixed attestation policy JSON marshaling issues

🔄 Dependency Updates

This release includes updates to numerous dependencies for enhanced security and performance:

  • Google gRPC updated to v1.73.0
  • OpenTelemetry libraries updated to latest versions
  • Docker engine updated to v28.2.2
  • Go crypto libraries updated to v0.38.0
  • Google Cloud Storage updated to v1.55.0

🗑️ Deprecations

  • SEV Support Removal: Removed legacy SEV support from the repository to focus on more modern confidential computing technologies

🛠️ CLI Enhancements

  • PCR16 Calculation: Added CLI option to calculate PCR16 register values
  • Improved VM Management: Enhanced VM removal commands with better error handling

🔗 Resources

🙏 Contributors

Special thanks to all contributors who made this release possible:

Support: For questions or issues, please visit our [GitHub issues page](https://github.com/ultravioletrs/cocos/issues)

Contributors

drasko, jovan-djukic, and 3 other contributors
Assets 9
Loading